Director, Technology Risk Management

Responsibilities

• Serve as the primary cybersecurity and risk advisor to EIT, aligning security strategies with the business priorities.
• Provide executive-level risk insights and recommendations to EIT leadership.
• Ensure security and risk management practices are embedded in business processes, digital transformation initiatives, and operational decision-making.
• Act as a bridge between ITRMS and EIT, translating technical risks into business impact.
• Drive compliance with applicable global regulations and internal security policies by tailoring the requirements to EIT’s operational and regulatory context.
• Identify, design, and help implement risk-based security solutions that are practical, effective, and aligned with EIT business priorities.
• Provide security and risk leadership for strategic IT programs, such as SAP S/4
  
  HANA implementation, ensuring integration of security and compliance throughout the program lifecycle.
• Stay updated on new and emerging technologies (e.g., AI and Quantum) and new laws and regulations, and understand their impacts on the business.
• Work in unison with EIT IT Value Teams to establish secure design, implementation, and monitoring of IT systems, applications, and cloud environments.
• Proactively identify opportunities to improve the cyber resilience capabilities of EIT systems.
• Support the Cyber Fusion Center in handling Cyber incidents related to EIT.
• Understand emerging cyber threats, vulnerabilities, and attack vectors, and establish proactive risk mitigation strategies.
• Influence EIT stakeholders to foster a security-conscious culture without impeding business agility.
• Drive security awareness programs that resonate with business functions.
• Lead, mentor, and develop a high-performing risk and security team.

• Bachelor’s Degree in one or more of the following fields: information technology, cyber security, computer science, business administration, communications, or related field.
• Knowledge of industry standard platforms such as SAP S/4, Workday, etc.
• 10+ years’ experience working in one or more of the following fields: cybersecurity, IT risk management, IT compliance, IT audit, information technology, or a related field.
• 5+ years’ experience leading global teams in a management or leadership role, particularly in a fast-paced, service-oriented environment preferred.
• Prior experience in the healthcare industry, with an understanding of the unique challenges in securing systems that support Finance, HR, and Legal areas preferred.
• Risk or security certification credentials (CISSP, GSEC, CISA, CISM, etc.) preferred.